A C++/Asm template for PIC/EXE/DLL malware
☆24Aug 12, 2025Updated last year
Alternatives and similar repositories for Imperium
Users that are interested in Imperium are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PPLwindow PPL Bypass via GetProcessHandleFromHwnd☆54Dec 29, 2025Updated 8 months ago
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆140Aug 31, 2025Updated last year
- Thats it! An Open-Source Windows UEFI Rootkit☆41Jul 19, 2025Updated last year
- Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…☆20Apr 24, 2023Updated 3 years ago
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆108Feb 25, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- SACL Scanner is a tool designed to scan and analyze SACLs.☆53Feb 13, 2025Updated last year
- Minimalistic HTTP(S) client for the NT kernel☆60Dec 1, 2025Updated 9 months ago
- Azure Blob Storage C2 Profile for Mythic☆30Jan 30, 2026Updated 7 months ago
- A bunch of shenanigans using functions, VEH and more☆37Jun 8, 2025Updated last year
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆78Aug 25, 2025Updated last year
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆277Jun 18, 2025Updated last year
- ☆25Sep 6, 2025Updated last year
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆134Dec 23, 2025Updated 8 months ago
- .NET port of Leron Gray's azbelt tool.☆26Sep 21, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.☆93Mar 16, 2026Updated 6 months ago
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 5 months ago
- Command Augmentation support for BOFs and .NET assemblies across agents☆52Jul 30, 2026Updated last month
- Shellcode Loader Utilizing ETW Events☆65Feb 26, 2025Updated last year
- Finding Truth in the Shadows☆127Jan 26, 2023Updated 3 years ago
- ☆40Nov 25, 2025Updated 9 months ago
- Reports on Driver, LSASS and other security services mitigations☆34Aug 18, 2025Updated last year
- ☆20Feb 13, 2026Updated 7 months ago
- Collection of Win32 with C++/Assembly for Hooking, Patch and Reversing PE file☆18Nov 7, 2022Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- vm_str.hpp is a header only string obfuscator.☆117Aug 24, 2025Updated last year
- Comprehensive Windows Syscall Extraction & Analysis Framework☆171Aug 30, 2025Updated last year
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- Local SYSTEM auth trigger for relaying - X☆160Jul 23, 2025Updated last year
- Extra cmdlets to help with quering security related information from Azure☆15Jul 28, 2026Updated last month
- 🛡️ Advanced PE obfuscation & protection detector. Scans binaries for Obfus.h signatures, anti-debug mechanisms, virtualization dispatche…☆27May 20, 2026Updated 4 months ago
- XPN's RpcEnum but based on IDA instead of Ghidra☆21Aug 17, 2019Updated 7 years ago
- LibWinHttp is a simplified WinHTTP wrapper designed as a Crystal Palace shared library for implant development. Its primary purpose is to…☆48Nov 4, 2025Updated 10 months ago
- A cross-platform C++ framework for building Windows shellcode☆176Sep 14, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Lightweight Patchless Hooking Library for Windows☆20Dec 31, 2025Updated 8 months ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆61May 12, 2025Updated last year
- A hacky way of getting cross-arch/platform support in Cobalt Strike☆37Aug 31, 2025Updated last year
- An OpenGraph extension for secrets☆22Aug 11, 2026Updated last month
- Umbrella will protect your shellcode from the rain.☆32Jun 4, 2025Updated last year
- modified mssqlclient from impacket to extract policies from the SCCM database☆49Feb 24, 2026Updated 6 months ago
- 64-bit, position-independent implant template for Windows in Rust.☆186Nov 28, 2025Updated 9 months ago